Cloud Design Box SharePoint and Office 365 Services

Cloud Box Silver - Teams and SharePoint Support for Secondary Schools

Enhance teaching, learning, and school communication with Teams, SharePoint, and Microsoft School Data Sync (SDS).

Features

• Automate Class Teams through Microsoft School Data Sync (SDS)
• Cover Manager for Class Teams/School Data Sync (SDS)
• Easy-to-use interface and navigation for SharePoint
• School intranet through Teams and SharePoint
• Self-service site/teams creation tool
• SharePoint web parts for school communications and navigation
• Centralised curriculum and department resources
• Class Teams Assignment Analytics
• Student Assignment Search Tool

Benefits

• Specialists in education technology
• Save teacher time through automation and centralised curriculum resources
• Drive up quality of learning through centralised curriculum resources
• Ongoing technical and teaching & learning support
• Metrics for leaders about assignments and centralised curriculum resources
• Collaboration for departments and roles, including Trust level
• Promote student independence and recovery of lost learning
• Saving IT team with automation of Teams and SharePoint sites
• Student Assignment Search allows monitoring of work for each student

£1,060.90 to £2,152.70 a licence a year

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@clouddesignbox.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

593776176470962

Contact

Sales Team
01482 688890
info@clouddesignbox.co.uk

Service scope

• Software add-on or extension: Yes
• What software services is the service an extension to: Microsoft 365 for Education, especially SharePoint and Teams.; We also extract data securely from all UK Management Information Systems to create educational structures in Microsoft 365 for Education.
• Cloud deployment model: Public cloud
• Service constraints: Our product builds on SharePoint and Teams within Microsoft 365 and is subject to the constraints on those services. The aspects of our product which are directly driven by Management Information System (MIS) data are limited by the data available through those systems.
• System requirements:
  • Least-privilege access to Management Information System data
  • Least-privilege access to the Microsoft 365 tenant
  • Secure remote access to a suitable school/MAT machine

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: First responses to cases are provided within 24 hours or less. We have an escalation phone number for emergencies. Support is only available on business days between 9 to 5 GMT/BST.
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: No
• Onsite support: No
• Support levels: Category 1 - Critical - Initiated by total unavailability of the service - 1 Business Day; Category 2 - Urgent - The problem has a significant impact on a individual site and/or local service operation - 2 Business Days; Category 3 - General - The problem has little or no impact on the site and/or the service - 5 Business Days; Category 4 - Question General - enquiry/question about the system - 8 Business Days; Category 5 - Change Requests - Changes to the original design specification 8 Weeks (Small changes) - Summer Roll-over (large changes). ; Further details are available at https://www.clouddesignbox.co.uk/sla
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We have a formal consultancy process for each new implementation, based around a project team. This includes sessions to discuss design/curriculum choices and to hand over the completed platform to both project/curriculum leaders and technical support within the establishment. ; ; We initiate further user adoption sessions several months after the implementation, and in each subsequent year, to ensure that the best use is being made of the platform, in which we share metrics about usage and provide recommendations. But our support desk is available throughout the year if an establishment has any questions about adoption.; ; Overview documents and training videos are available on our website.
• Service documentation: Yes
• Documentation formats:
  • PDF
  • Other
• Other documentation formats: Video
• End-of-contract data extraction: We add value to the establishment's own Microsoft 365 tenant, where their content/data will continue to reside.; ; At the end of the contract with us, all content in Microsoft Teams, Microsoft SharePoint and Microsoft Office related to the structures we have set up will continue to be available. After the contract ends, no new permissions will be added to those structures, but we will not remove existing access for users. We will provide overview guidance on how the establishment might continue to manage those structures and permissions, or how they might move the content to other locations/services. ; ; After the contract ends, we will remove any installations from servers at the establishment, and disconnect any services we are running for them in Microsoft Azure. We will also dispose of any database records relating to that establishment, having offered to provide a final export of data from the Assignment Dashboard.
• End-of-contract process: There are no additional costs associated with uninstalling our product at the end of the contract.; ; At the end of the contract with us, all content in Microsoft Teams, Microsoft SharePoint and Microsoft Office related to the structures we have set up will continue to be available. After the contract ends, no new permissions will be added to those structures, but we will not remove existing access for users. We will provide overview guidance on how the establishment might continue to manage those structures and permissions, or how they might move the content to other locations/services.; ; After the contract ends, we will remove any installations from servers at the establishment, and disconnect any services we are running for them in Microsoft Azure. We will also dispose of any database records relating to that establishment, having offered to provide a final export of data from the Assignment Dashboard.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Yes, our self-service portal works in browsers on mobile devices. Some Microsoft Teams features are different on mobile and desktop though Microsoft are continually closing these gaps.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: We use Freshdesk for support tickets.
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: We rely on Freshdesk's testing with screen readers and other tools.
• API: No
• Customisation available: Yes
• Description of customisation: Schools can customise: the structure of the school Intranet; adding sites and teams using our self-service tool, themes and logos, subjects which will not receive class teams, membership of class teams through our Cover Manager, merging and renaming centralised subject areas, access to subject areas, custom resource libraries within subject areas, page layouts, properties of CDB web parts.; ; Selected users can customise aspects of their platform using self-service tools such as the Site Creation tool and Cover Manager. Our support desk are available throughout the year to help with more substantial customisations, as per our SLA: https://www.clouddesignbox.co.uk/sla

Scaling

• Independence of resources: Our product adds value to Microsoft 365 for Education. Microsoft Office 365 is highly scalable and highly available.; ; Our technologies running within Microsoft SharePoint pages, Teams, and Azure apps use short-lived caching to improve the user experience and reduce calls to the Microsoft APIs.; ; We use scalable Microsoft Azure workloads to process data, and provision structures and permissions, in Microsoft 365.

Analytics

• Service usage metrics: Yes
• Metrics types: Our Assignments Dashboard provides an overview of the assignments set by teachers. Reports are available at the level of the subject and individual classes through our web interface. It is also possible for the establishment to export the data as CSV for further data mining. Reports are compiled/updated at regular intervals, usually once a week, and the dashboard is always available to show the most recently compiled data.
• Reporting types:
  • Real-time dashboards
  • Regular reports

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Assignment analytic data can be exported as a CSV file by the organisation. All other data is stored in Office 365 and not by our software.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Our service provisions Teams, groups and sites in Microsoft 365. Microsoft 365 has its own availability SLA direct with the customer.
• Approach to resilience: Microsoft Azure is a scalable and highly-available platform able to cope with heavy loads and spikes in usage. Our processes running in Microsoft Azure are resilient through their ability to react to failure or throttling and retry operations appropriately. All successes, failures, and retries are logged. Further details about our approach to resilience are available on request.
• Outage reporting: Email alerts to appropriate individuals within the customer organisation.

Identity and authentication

• User authentication needed: Yes
• User authentication: Identity federation with existing provider (for example Google Apps)
• Access restrictions in management interfaces and support channels: In addition to the Microsoft authentication, we have role based assignments for different levels of access in the system.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Identity federation with existing provider (for example Google Apps)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Citation (formerly QMS)
• ISO/IEC 27001 accreditation date: 27/02/2024
• What the ISO/IEC 27001 doesn’t cover: There are no gaps in our ISO 27001 certification relating to security.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications: ISO 27001

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Essentials
• Information security policies and processes: We are compliant with ISO 27001. All employees read and sign the security policies, and we have regular internal training. We have a policy for reporting security issues and a process for employees to follow for data breaches, subject access requests and any other GDPR related requests. Any potential breaches are reported to our Data Protection Officer.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We use DevOps to track changes. There is a development environment on which any changes are published and approved before being approved by the senior developer for shipping to production. The architecture is designed in a way that data is segregated and minimal personal data is stored on the provisioning system. The senior developer and software testers check any new code changes for potential security impact.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We use GitHub alerts for any security vulnerabilities to open source libraries used. Patches are released within 1 working day. Additional security inspections are carried out periodically inline with the security policy.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We use the inbuilt Azure firewall and protection monitoring. If an issue is found, we respond to the threat within the security policy timeframes (2 hours).
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: We are compliant with ISO 27001. We have pre-defined processes for common events in our GDPR and security policies. Incidents are reported to the data protection officer, in line with our privacy policy within 2 hours. We have a reporting template which is completed and approved for each incident.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Wellbeing

  Fighting climate change

  Our blended learning solution, based on Microsoft 365 SharePoint and Teams, enables schools to reduce the amount of printing and photocopying they do, as well as reducing usage of paper exercise books and textbooks in some cases.

  Covid-19 recovery

  During the Covid-19 pandemic, our service allowed thousands of students to continue learning at home. Students who are struggling to return to school full-time after the pandemic, or as a result of ongoing mental health issues, can continue to do some of their learning at home through our product. This allows those students to work towards getting back into school full-time, in a way which supports their individual needs.

  Wellbeing

  Our product allows students who are struggling to attend school full-time to spend some of their time learning from home in a well-structured way which is still aligned with classroom activity. This allows them to participate in some aspects of school life, in a way which is comfortable for them, while they explore their mental and emotional challenges and work towards full-time attendance.; ; Additionally, the Reflect service within Microsoft Teams for Education allows learners to record their feelings generally and about specific assignments. The Class Teams which we automate enable use of Reflect.

Pricing

• Price: £1,060.90 to £2,152.70 a licence a year
• Discount for educational organisations: Yes
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@clouddesignbox.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.